Privacy Policy

Last updated: May 2026

This Privacy Policy explains how gvaairport.com collects, uses and protects your personal data. It applies to all visitors of the website. We comply with the Swiss Federal Act on Data Protection (FADP/nLPD, in force since 1 September 2023) and, for visitors in the European Union, with the General Data Protection Regulation (GDPR).

1. Data controller

The controller responsible for processing your personal data is:

Geneva, Switzerland (full address on request)
Email: [email protected]
Phone: +41 22 884 88 88

Under Swiss FADP we are not required to appoint a Data Protection Officer, but you may contact our privacy team directly at the email above for all data protection matters.

2. Data we collect

We collect only the data necessary to operate the site and respond to your requests:

Contact form: name, email address, phone (optional), message content.
Booking inquiries (via the booking widget): pickup and drop-off locations, flight number, date and time, passenger count, name, email, phone.
Technical data: IP address, browser type, operating system, referrer URL, pages visited, timestamps.
Cookies and similar technologies: see our Cookies Policy.

We do not knowingly collect data from children under 16.

3. Purposes of processing

Respond to your contact and booking inquiries.
Provide and improve the travel guide content.
Measure audience and improve the site (analytics).
Comply with Swiss legal obligations (in particular accounting and tax law).
Detect and prevent fraud, spam and abuse.

4. Legal basis

Consent — for non-essential cookies and analytics (Art. 6 GDPR; Art. 31 FADP for cross-border transfers).
Contract — for processing your booking inquiry through our partner.
Legitimate interest — for site security, basic analytics and abuse prevention.
Legal obligation — for accounting and tax retention.

5. Sharing with third parties

We share data only with the following categories of recipients, all bound by appropriate data protection agreements:

Google LLC (Google Analytics 4) — anonymized analytics, United States. Standard Contractual Clauses apply.
Google Cloud / Firebase — booking data storage, EU region (eur3, Belgium / Netherlands).
Cloudflare, Inc. — security and CDN, United States with EU edge.
Avionio sp. z o.o. — embedded flight information widget, Poland (EU).
Booking partners (Swiss Limousine Service and select chauffeur operators) — in Switzerland, to fulfil your booking.

Transfers outside Switzerland and the EU are based on adequacy decisions or Standard Contractual Clauses. The full list of sub-processors is available on request.

6. Data retention

Contact form messages: 12 months from last exchange.
Booking records: 10 years (Swiss Code of Obligations, Art. 958f — accounting retention).
Server logs: 90 days.
Analytics data: 14 months (Google Analytics default).

7. Your rights

Under Swiss FADP and GDPR you have the right to:

Access the data we hold about you.
Have inaccurate data rectified.
Request deletion of your data (subject to legal retention).
Receive your data in a portable format.
Object to processing based on legitimate interest.
Withdraw consent at any time.
Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, for EU residents, your national supervisory authority.

To exercise your rights, email [email protected]. We respond within 30 days.

8. Cookies

We use essential cookies (always active) and analytics cookies (only with your consent). See our Cookies Policy for full details and management options.

9. Security

The site uses HTTPS encryption, hardened hosting in Switzerland, regular backups and access controls. No system is 100% secure; we cannot guarantee absolute security but apply state-of-the-art measures.

10. Updates to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top reflects the latest version. Material changes will be highlighted on the home page.